Detections
Analytics
AIX 7.2 : bos.rte.control (U870330)
medium Nessus Plugin ID 91237
Language:
Synopsis
The remote AIX host is missing a vendor-supplied security patch.Description
The remote host is missing AIX PTF U870330, which is related to the security of the package bos.rte.control.Libxml2 is vulnerable to a denial of service, caused by a heap-based buffer overflow in the xmlParseEntityDecl or xmlParseConditionalSections function. By using a specially crafted XML data, a remote attacker could exploit this vulnerability to trigger an out-of-bounds read and cause the system to crash. Libxml2 is vulnerable to a denial of service, caused by a heap-based buffer overflow in the xmlParseConditionalSections function. By using a specially crafted XML data, a remote attacker could exploit this vulnerability to trigger an out-of-bounds read and cause the system to crash. libxml2 is vulnerable to a buffer overflow, caused by improper bounds checking by the XML parser in xmlNextChar. By using a malformed XML file, a local attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash.
Solution
Install the appropriate missing security-related fix.See Also
Plugin Details
Severity: Medium
ID: 91237
File Name: aix_U870330.nasl
Version: 2.2
Type: local
Family: AIX Local Security Checks
Published: 5/19/2016
Updated: 1/4/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: cpe:/o:ibm:aix:7.2
Required KB Items: Host/local_checks_enabled, Host/AIX/oslevel, Host/AIX/version, Host/AIX/lslpp
Patch Publication Date: 1/20/2016
Vulnerability Publication Date: 1/20/2016